
PATENT ABSTRACTS OF JAPAN 

(1 1 ) Publication number: 08251 1 56 A 



(43) Date of publication of application: 27.09.96 



(51) mt. ci H04L 9/06 






H04L 9/14 






G06F 13/00 






G09C 1/00 






H04L 12/54 






H04L 12/58 






(21) Application number: 07052252 


(71) Applicant: HITACHI LTD 


(22) Date of filing: 13.03.95 


(72) Inventor: NISHIOKA GENJI 

MIYAZAKI SATOSHI 


(54) METHOD AND SYSTEM FOR CIPHERING 
ELECTRONIC MAIL 


deciphers the mail body sentence P from the data 
ciphering key (k) in addition. 


(57) Abstract: 


COPYRIGHT: (C)1996,JPO 





PURPOSE: To provide an electronic mail ciphering 
method which can be used with a normal mail together 
without specifying the mail system and the kind of 
device, reduces calculation processing and the burden of 
memory for attaining a security function for persons 
both transmitting electronic mail and receiving it, and 
is provided with high safety against tapping and 
aunauthorized persons who set up to be authorized 
without any need to worry about the coincidence of 
users' keys. 

CONSTITUTION: Each user of a communication network 
prepares key information of each and opens only an open 
key. Next, the transmitter A and the receiver B of the 
electronic mail share master keys KA, B and KB, A from 
his own secret key and the open key of the opposite side 
and the transmitter ciphers the body sentences P of the 
mail by a data ciphering key (k) through the use of the 
secret key cipher. Then the data ciphering key is 
ciphered by the master key. Then, they are sent to the 
receiver and the receiver deciphers the data ciphering 
key (k) through the use of the master key KB, A and 
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[1**381] h !7-^±r-^-/K75^§:ff ^tf 

Pf^ft^Tfcor, m^te3l«i:Lr, i£{f#Ate#<® 

B.A^f&SU ^<?>££, K A ,B=K B ,A^^^^. W 

[^trii, ^;h,k<o§ff#£i£{f%A5B^^** 
tt-r-^Bf ^Hfc»k Sr^^^A^aSt^, §:ff#B^(^rfl 

* m ( - « 6 % ft a *t * * r / u y x a & m ^ r , 

Ei(k ; P) ^-:?flff#-fls»k&^;*^»KA,Bi- 

TPt^it:L/tsf-§-3tE2(KA,B ; k) sr§m#BM«{t 

U aft*Btt, •7^^#Kb i a^^TE2(Ka ( b; 
k) £>ib^-^^L^k£m-*HbU ^b^v^-^Pf 
^ik$:ffi^rEi(k ; P) fr&XP &&*jr 

fki- 5 ^ £ £4#®r — /n« -§-<t;* isfec 

#B LTi£ff t* £ ^ — /^3CS:Bf ^ritlr * -A- 

x A & j: x A \ctti&-f z<&mm y aSt^J* 

U SfS#Btt»*«XB^^Vffi*»XB^^JSi"S^ 

BBftyB&tf^U >^ --oSSteS t tr , t£{§^ 
A*3,ta«S:fs#B(*e4>o I Dfti^ty^CfgU 

YAj=exp(a : x Aj) (mod p) for 

g{g#Bh3\ 0<XBj<p-1^5lSx B j 

ygj = exp(a : x B j) (mod p) for 

fcffl-JSU y B j Ci =1, n) &%:m%:B<D<&Mm 
t ITf i L (fcffU exp(a : x) 13 a £ x JP> Lfcffi 

i»«#Ara, S^coS^^r*^^S^x A ji:S:ft#B(D 

Ka, B = n {exp(y Bj : *Aj) (mod 



#A<7} I D'l»« I A^ ( b^fS*A^@ 3 fir^ffiaE«ts a** 

s A =f (ia) , -ofMau ^&bco i D'lta 

I B^feS^B^S^OffiasesB*:. s B =f (Ib). 

a^)I (s A , v A ) «raift#AlcS^tcSB*L, H9«lc 
««»s B t s B i-»JCS-*"<5^H*v B fiO» (s B , v B ) 

sa^sb^Ov^vb, tf*J*i£L, iHft#AI^ (y A > 
v A ) S«#B(* <y B , v B ) Sr^rtu-ena^^ 

#A(ie»<7>«a5« (x A , s A ) ^Sft#BCO^|B^ 
(y B , v B ) 3&*b^^^StKA f B*^ia:l-^ Sfa#BJ4 

(x Bi s B ) <hgft#B^<^^^ (y A . 
v A ) A^fe-^^^SiKB, A^f^JSl-* CCOi:#, K A ,B = 

K B , i&f&&l** ^t-, iSfff #Att*- : F>— ^SrSff-T 
#ABB<^#"^^^fli> Sttt, #^^^ii^i^ff^A^ 
L , EJL«o«-¥-^— yuaftlc*5i^r, v^-^Pf^^M 

iSSfS^AW-r-^Pff ^-fbiik ^7 ^#J±\zm 

TPf^{HL,fc9f-§-3tEi(k ; P) , Pf-fHfcft k 

Sr^^^»KA,B^^«f* J ft:l-fcrtP#S:E2(KA 1 B i k) 

^r^m^Bivi^fB U S:«*B(*, ^^^#K Bl A^ 
^TE 2 (K A(B ; k) frb^r-fm^itmk 

S <m*ffc«kSrJ8^TEi(k ; P) 

y — p zm-^it-tz Z t ^r^iteii 1 / 

< x A j< P - 1 *5S»XAj( i = 1 > n)^T7>^ 

j = 1, n, 

n) &7^#J±icmXf. 
[»2] 

j = 1, n, ■•• («2) 

^MT^5y B j (i =1, n) &m^X* 

[»3] 



P) 



j = 1 



n} 



(3) 
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^BB«^ft»5y A j (i-l. n) &^T, 

Kb, A^n {exp(y Aj : XBj) (mod 

b^a«#^i*ft#AH<z>#^^^«35»fe<fc«*-& 

S A , **:I4, iSfS#A(7>jKe»"<?fc53g»xAj (i = 
l, n) t»^«H«ed»6), 

[«5] K (A) = 6 (x A i, x An ) > 

C(A) =E A (K(A) ; S A ) , 

i:s^o»««^fe^^^»*^ja;-r«wt*<, lets 

Snw5^^»S;ttntiL (fcrtfU E A (k ; 

m) ttA^Bf^-rssafttPf-^r^^y xaicj; »? ^ 

P) v ? "-^lif#^»kS:^^^«iKA,B^'CPf-S-^ 
UfcB*-t3CE (Ka.b ; k> Srp<-/i-Sft#B fci£{f U 
afS#BI5, -7**«Kb,a*:>E^TE <K A ,B ; k) * k 
fc^-*ltf#{fc»k&**ffc;U £ <b fc^- * ef #jk«t 
k«:ffl^TE(k ; P) b * — /^*3C P Sr*#-ft;+5 

[IfjfciJU ]' ilff^y h 17 — ^_L"C;*-vKZ>j£SfS SrtT 

#b \zm vx&is-r % * -/^^-^-tsm-^;* — ^ 

WS^Lt, ir^f4. I^pi^, P2 -l^-o 

2^il, p 2 - 1 <nmm&ftM&m%t u iSft#A 

tt, 0 < x A < p i- 1 458ftx A S:7 
[3£6] yA = exp(a i : x A ) (mod pi) , ^ 

S«#BI4, 0<x B <Pi-l458ftx B t7y^ 

Milium 

Hfe 7 1 y B-exp(a i ; xb) (mod p i) , 
£ff|£L (fcfcU exp(a : x) 14 a * x SI LfcffiS:* 
fc>-*\ ) . 

A<D I D*IS« I A**k* U+ iA (mod P2~D * 55 P*" 
*J&, /6>0, I A ^ I B* fctf I A+ i A (mod P2-D 50 



@K B ,A^, 

P ) I j = 1 , n } , 

=£I B +iB (mod p 2-1) «fc 9f-jES5ft i a*» 

[$:8] s A =exp( I A + i A : 1/2) (mod p 2 ~D . 

tcttmu p«cs«fBwiD#aiB3i^, 

[%C9] s B =exp( I i B : 1/2) (mod p 2 "D , 
KTff-HU */rS:iSft#A*5<tt)«SfS#B(cS^^K 
#U ID««WiM^)St58e»'b 
a&{&#AI4y A £. «a»s A ^JS-*"S^M«» 

[3&10] v A =exp(a2: s a) (mod p 2) > 

£cD*§ ( YAl v A > &&iB%A<DAfflmt urasi, 

SfS#BJ4y B ^ 3Ba5»s B t-»JS"t-S^8B* 
[$fell] vB=exp(a2 ; s B ) (mod p 2) . 
£<^3fi <y B . v B ) £rgff^BCD^f|fj#£ Itlit, 
■7^#B*tteliLT, iSW#AI4, Sft*B££>BB 

(x A , s A ) t&m%B<D'£MmX'fr>& (y B , v B ) 

[%12] Ka,b= g (exp(ys ■ x A ) (mod pi) , exp 
( v b ■ s a) (mod P2) )» 

(crm&u aw* b i4, §#offi«HHrc*>s (x B , 

s B ) ti3S«*A(O^H»"Cft»S <y A , v A ) Sr^^ 

t\ -t^^k b ,a&, 

[3&13] Kb, a= g (exp(y A : XB>(mod pi) , exp 
( v a : s b) (m°d P 2) ) » 

C(75^^, K a ,b = K Bi aW^^ ^ft#AI4m 
^■p«-^«:a6fti-5«*^#^afi#i-»UTt4, ^rix 
b oS« # iSfS # A Ffl o^--^ -x ^ <b * ^>*l^ 

s A , *fci4, m5%A<7>w®m (x A . sa) ^«t*ja 

[«»14l K (A) =6 (x A , s A ) , 
(CT^jSLfciiK(A) Srffi^r^^^fii^-g-SASrW 

[»15l CCA) =E A (K(A) ; S A ) , 

A4|a«$Jxr^5 fcO{coi>T(4, tr/zJc^^O^r^^ 

$tit^5-7^^i^S5«:i:^L ( 7c L > E a ( k ; 
M) I4A^Bf«F-r5ffi«»fflF*r/u=/y *?^3t 

Pf-g-ft:»k«r7>'^A(c3S0«, ««#B icDpflr^iiic 
3tP^r^— ^Pf-^^ktcrPf-^^U/cPf^-^CE (k ; 



5 

p) t, ^-^Pff-i-fbftkSr^^^aiKA.BtwrrtP-s-fk: 

LfcBf *3tE (K A ,B ; k> *^-^g«#BtCiS« U 

SfS#Bii, ^*^K Bl a^^^^e (k a ,b ; k) ^ 
fe^-*flf*te»k&a*{fcU * bt^-^Eff^HKgi 
k«rffl^TE(k ; P) * -^#3£ P «r*#*fc:-r« 

2&£:PIU p 2 - 1 C0«B###S:8S*£ U i£{f*A 

IS, o < x A < p 45fi»x A S:7 y^l:l(J«, 

[^16] yA=exp(ai : xa) (mod pi) , 
*«-#U Slfi^BlS, 0<XB<Pi-li*8«:xB 

[3&17] yB = exp(ai : xb) (mod pi) , 

liMf AOI DMI A ^^, j£ft#AK@^<Z>ffia5 
its A ^IE»e £fflt^T, 

1^:18] s A^exp( I a ; e) (mod P2~ 1) > 
tCTfhSU R^iC§:ff#B(7> I D«« I B^ib, iSff 
#Btc@^««»s B *IE*e £M^T, 

s B = exp( I b : e) (mod P2~ 1 ) , 

KT«-*U ***«fS#A:fcJ;U<Sff#BK:££{£6a 
*L (t/fl, exp (a : x) I* a * x fl L)t fit***? 

[3&20] v A = exp(a2 : s A ) (mod p 2) , 

<nm ( yAi v A ) 4riS»#A<7>^|JM[ti: Ur««L, £ 

[3&2L] vs = exp(a2 : s B ) (mod p 2) , 
<om (y B . v B ) *rS«#Btf>^9mJ: LT«»U ^ 
x?mv>&G&&t tr, iSft#Att, Sfff#B£<z>ffl 

(xa, sa) £S«#BC04£BiS*T*>5 (yb, v B ) 

-^^ftKA.B*^ 
[^22] K Al B= g (exp(y B : x a) (mod p 1) , exp 
( v B : s a) (mod p 2) ) , 

KTtfsjSU g{?^BI3\ e'j>Wffi*«T-*>5 (x B , 
s B > £i£fS#A<a4fcliMr?*>3 (y A , v A ) «rffl^ 

[3&23] Kb, a= S (exp(y A : x B ) (mod pi), exp 
( v a : s b) (mod p 2 ) ), 

#^#j-LT{2, ^nfcogfB*£j£f§#AfH<a*^;** 
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e 

s A ) i:»£j«Bflfte*»fe, 
1^24] K(A) (x A , s a ) . 

[ft25] CCA) =E A (K(A) ; S A ) , 

/<7 i i & » ^ -7 7 ^ t ^Mt 6 ^ ^ < , SBttt 
^Tl^-7^^i^5:^t (JtfciL, E a ( k ; 
M) ttAd^«f+s««fitPt-§-T^^y X-MCJ: 9^3t 
M£#ktcTW#flSLfc«ft&»:b"*-) , 

yu*3Cwrtf«^b*Q!31i: It, j§fff#Att, v^— ^ 

3CP*^— ^Bt#ft«ik ^T»* J flibfcB*-g-3CE(k ; 
P) ^--^W^kftk Sr^x^»K Al B*-"CBf^t; 
LfcBf^E (K At B ; k) ;Ugfi#B{;iiSfEU 

^ SfS#B», ^^^#k b , a^^te (k a ,b ; k) a> 
kOKE(k ; P) ^*3tP«r*#fk:"rS 

ft SSrf* — /uiiff ^^^tc&^T, *£f8#A:&*3:fi 

p ^*jS»n = pi- p 2 i:S«:a Sr^BBL, nO^S^: 
»«iiE*a&8«i L, iSft#Att, o<x a <p- 
1 /j;5ISxa^7 v^^ic5Mt^, 

[^C26j yA=exp(a ; xa) (mod p) , 
^rff^L, Sf5*Btt, 0<XB<p-lft«8»XB* 

[^27] yB^expta ; xb) (mod p) , 
SrffJtL, tv^^fiftMtLT, ^fa#A*5j:U« 
§:ff^-B^, g^co 1 DM^rt >^fc:S»U -^^^ 
i^j^ft#ACO I Df« Ia^^> I a+ i A(mod 1. c.d(p 
1-1, P2-D ) Ia^Ib*^^ 

I A+ i A (mod 1. c. d( p 1— 1 , P2~ 1) ) ^ h+ iB 
^ (mod I.e. d(pi- 1, P2-D ) 5KiEft«fe 
iA^31t^, i^{f#Alc@^co^ (s A , v A ) 
[^C28] s A === exp( I a+ i A : 1/2) (mod 1. o. d( p 1 - 
1, P2- 1) ) , 
VA=exp(a ; s a) (mod n) , 

^TffS BHtSflfBfl)ID#«lB36»b, gfa 
tB{C@f (7)^ (SB, v B ) 
[ft.29] s B^exp( Ib+ iB : L/2) (mod 1. c. d(pi~ 
1 , P2- 1 ) ) - 
v B ~exp(ot : s B ) (mod n) , 
50 ^i^ft#A^8 ctt/^ff^B (C^^^IS 



T 

tl (jtfc'U exp(a : x) (* a *: x SI LfcffiS:**? 
*t") , 

fS*A»(y A . v A >*i£fS#A<oaH*£ LT«*U 

gftifBiS (y B( v B ) ^Sfi#B(7>^H^^ irii 

j£«#AI;3\ §ff#B i:fiOBBT-*ii(c:tft^r-r«MlBkgS: 
ffli^r, e»o«ffi»-cfc<5 (x A , s A > £§:fi#BcD 

^fl^r&& (y B , v B ) "^^ttKA.B*. 
[^30] K Al b = g (exp(y b : x A ) (mod p), exp(vs: 
s A ) (mod n ) ) , 

K-cf&su sfs*B«, a»(DSffi»r*>4 u B , 

s B ) £i£{f#A(7>^WiiT-&>£ (y A , v A ) SrjS^T 
^^^^K B , A £. 
[3&3l] K Bt A = g (exp(y A : x B ) (mod p), exp(v A : 
s B ) (mod n ) ) , 

KTH^cU K AlB = K Bf A tf*J#£ U 

ITft, *tLib^SfS*^a6fS#ABBO«--^^^»^ib 

&5*-&S A , *Jtli, ««#Atf>eflB«i (x A . S A ) 

t»32] K (A) =0 (xa, s A ) , 
\z.X¥Ef$t lfc®K (A) *rffl^T^^^»w«-&S A 4:W 

[«33] C(A) = E a (K ( A ) ; S A ) , 

^Etssnr^s to^oi^rtt, »jfc^ffi#cr>4*«i« 
ZtiX^&TXfm&fcoZ.ktl, (fcj£U E A (k ; 

m) (iA^9fW-*-s«a5«Bf*r/u^y XAtcj: 9 

/U#*<7)lif«#{fc*&&£ LT, Sift* A 13, v^-^ 

XPfe^-^PlNHbSSk tcrffir^^LfcPt^SrE (k ; 
P) f-^m^itmk &"r^^«*K A(B t-^W 
LfcPf^XE (K a ,b : k) Sr^-/uSft#B^7SfS U 
gff^BIS, v^^iK B ,A^^TE(K Al B; k) A> 

kt«KE(k ; P) ^*3CPSrtt^ti-S 

#b tc*t LTitft -r s * -^srsrut^k-rs 

tt, ir^te, *»p"i:-&ja«:n = pi-p 

u as«*Att, o<x A <p-i^5itx A ^7y^ 
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[$C34] y A =exp(a : x A ) (mod p) , 
*W-*U g«*Btt. 0<x B <p-lft«S»XBt 

[^35] y B = exp(a : x B ) (mod p) , 

(SiSSfS*Aco I D»« I A ^(b, iSft#A{cH*rco« 
( s A , v A ) $riE*e *ffl^T, 

[S^36] s A=exp( I a : e ) (mod 1. c.d(pi - 1, p 2 
/<? -1) ) . 

v A =exp(a ; s A ) (mod n) , 

icrtf^L, iPj«K3fa#B<a i dw* i B a>k, a« 

fBlCifOi (s B - v B ) 

[18:37] s s=exp( I B : e ) (mod 1. c. d(p i~ 1 , P2 
- 1) ) , 

VB = exp(a : s B ) (mod n) , 

KTfUJU #^SriSft#A*5j:tJ«Sfff#B(^K^tCSa 
^fiJL (fcfcU exp(a : x) 13 a £ x * L)fcfii«:* t> 

20 i*«#Ali (y A , v A ) ^MfA^lii 

ITIit, gflfBii (y B , v B ) ^rSft^BCO^W 

S^««Jt^4>S (x A , s A ) £§ff#Bco£:M^T- 

(y B , v b) ^b, *^-*^$$K a ,b£^ 
[38:38] Ka, B= g (exp(y B : x a) (mod p ) , exp 
( v B ; s A ) (mod n ) ) , 

(ctmi, gfs#Bf** a#o««*rc*>s (x B , 

s B ) tiS«*Aco^BB»r-*>S (y A , v A ) Srfflt^T 
J<? -e^^iKB.A^:, 

[Sft39] Kb, A = g (exp(y A ; x B )(mod p ) , exp 
( v a : s b) ( m od n ) ) , 

asfs*Aiitt^^-^frjSfst-s«*^^^s«*tc^ 

^5^S A , *fc(3, a«#ACOS5«» (x A , s A > 
IWC40] K (A) = $ (xa. s A ) , 

[«41] C(A) = E A (K (A) ; S A ) , 

t ej><ojB«***ib^^^«&f^iai-5-^*< , IB* 
^nr^^v^^i^f (fcffi, e a ( k ; 

m) ?3A^Bf»i-s««atw*r^^y x-^tcj; i?5P3c 



9 

LfcWP#3tE(K A , B ; k) £y-/u£{f^Bl^i£f? U 
Sft#Btt, ■7^^^K b ,a^I'^E(K Ai b; k) 

b^-*i*#<t»k&«*{fcu £ ^^^-^Pf-§-^^ 

k«:BKE(k ; P) * — P *tt-fHfcf5 
a 2 £^PlU »*«Z/(P2-1)' <75j£«rt±i*-*-5ffia 

^f-^T/u^IJ XA*3J:tMSr L (izv* 

MSr»kT?»#fl:U3tjeaS:Eo(k ; M) X^tfr-f) , 
i*{f#AI;S:, 0<x A <Pi-i458*x A «:7y^ 

[^42] yA=exp(a i ; x A ) (mod pi) , 
£§f*U SflfBia, 0< x B < Pi- 1 *SS6«:xb 

[^43] yB = exp{a i ; x B ) (mod pi) , 
SrtfJSL exp(a : x) a & x * Lfcffi*:* 

A<7> I D-itW I A^kSSf^AfcLH^OfiMBSt s 

[»44j s A =E 0 (r ; I a) , 

#B^@*rco«a«isB*. 

[3&45] s B =E 0 (r ; I B ) , 

A*!!?, iSff#AfA, y A £* «®» s a^/S+^W! 
it 

[3&46] v A =exp(a2 : s A ) (mod p 2) > 
co^i (y A , v A ) SriSff^AO^BBfiit ur*»L, S 

[0t47] VB = exp(a2 : sb) (mod p 2) » 

i*«#Att, «flr*B^oiH"e*a«c«*r«H*B*: 

^^T, (x A , s A ) £Sff*BGD 

4*BI!»-e*>5 (y B , v B ) 2»<b* ^^^tK A) B^, 
[3&48] K Ai b= g (exp(yB : x a) (mod pi), exp 
( v 3 ; s A ) (mod p 2) ) , 

KTffuau gm*Brt:, e»^«*fl*-e*>5 (x B , 

s B ) £«{i#A<Z>^BIJSrt?*>S (.y A , v A ) 
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[%49] Kb, A~ K (exp ( y a : x B )(mod pi), exp 
( v a : sb) (mod p 2) ) > 

icrfF^u, c<7}£#, k Ai b=k Bi A^fiStit u 4#l^ 

jSW#A(i«^^-^*riSfS-*-S«SA4*^S<t#tC» 

enboSfi^-^i^ff^AF^^^-^^^^^ 
*5»-&S A , Sfctt, iSff#AC0ffi«» (x A , s A ) 

[SfcsoJ K (A) = 0 U A , s a ) > 
[»5ll C(A) =Ea (K (A) ; S A ) , 

^isti^nT^^ #r/t^*@^<7^M# 

StiTl^v^^tSrtti^i^L (fcfcU E a ( k ; 

m) ttA^^«f-t-s«jaf«irtP#r^^y xjujcj; i?5p3t 

M*»k{cm»#{l:L)tjB*S:«*3-r) , 
^P^^-^Pt-^fb^ktcrPf^-'fkLf'St-i-^ECk ; 

p) t, ^-?m^tmk&^x*mK&,B^xm-%-it 

LfcBf^XE (K A ,B ; k) 3rp< — >^§{i#B{£i£« U 
S«*BI*, ^^^«*K B ,A*ffl^"^E (K A ,B ; k) 

k^PTE(k ; P) /u*3CP«r«#ft;-t-S 

A^^Vttr Sr««f««^ L (7^ffL, N = l.c.d(pi 
-1, P2-D T-^^, -fe v^(D«ffiiff«T?*>3 8ME 

^r^rEoCk ; M) T?*t>-*") , 

iJlft#Att, 0<x A <p-l458»XA*^^^t- 

[0:52] yA = exp(a : x A ) (mod p) , 

Sff^Bi^:, 0<x B <Pi-l458*xB 

[^53] y B = exp(a ; x B ) (mod p) , 

Sft#Br3i, s»oiD*atty^ica»L, 

ttfil«#A<7> I D«« I A ^^i^ft#AtC@^0^ 
( s A> v A ) 

[%54] s A =E 0 (r ; I A > . 
50 va= exp (a : s a) (mod n) , 
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B(:lf^i(s B) v B ) 
[#55] s B -Eo(r ; I b) . 
vs=exp(a : s b) (rood n) , 

9, a«#Afi (y A , v A ) %&i$%A<n&fflmt IT 
»»U Sff^Bte Cy B , v B ) ^rgff^Bco^^^i: 

ffl^T, e»<7>ffiffi**C«>5 (x A , s A ) £Sfi#BGD 
<£{^#-r&>& (y B , v B ) ^b, -7^^tK Al B^, 
[#56] Ka, B = g (exp(y b : XAMmod p), exp(vfi: 
s A ) (mod n ) ) , 

KTtfMSU Sff#Btt, (x B , 
s B ) ^iS&«#A<3r>^;H»rA)« (y A , v A ) fcffl^T 

[#57] Kb, A = S (exp(y A : x B ) (mod p), exp ( v A : 
s b) (mod n ) ) , 

fc53ft#S A , 3&«#A<7>:|&B» (XA, s A ) 

[#58] K (A) =e(x A , s A ) , 
KTffr«Lfc**K(A) *^T^**»CO*'&Sa*:W : 

[#59] C(A) -E A (K(A) ; S A ) , 

#IEit£ixT^5 t>^l^oi^Ti3\ ^Tfcictl^co^M^ 
Stltl/^^^^«S:tt5Ci^L (fcj£U E A (k ; 

m) liA^WWi-sSftftPff-^r/u^i/XAicj;?)^ 

P) t. ^-^Pt-e-^SikSr^^^ftKA.Bt-^**^ 
LfcPt^E (K a ,b ; k) ^$fff#BMi£fl" U 

S«#Btt, ^^^mK Bt A^rffl^^E (k Ai b ; k) 
ib^-*Bff*ffc»k*1I*{fc;U $ ^ Pff -g-fb* 

kt«KE(k ; P) * — y^*3C P «r*-§-<fc-*" 5 

[W3R3g 1 0 ] »3fciB4 , 5, 6, 7, 8£fci3:9tc£> 

^^A^&aQ*-?, »ft#Ai:afflr#Bt^Mt s 

[#60] g(xi, x 2 ) = h(<J>(xi, x 2 ) ) > 
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[#61] <f> : Z/(p) XZ/(n) -» Z/(pn) 
( (x, x) -+ x) , 

fc«lR]§!*tt$:*fcU Z/(m) «SE«m«:ffii:-rS»J 

1 ] 5, 6, 7, 8*fctt9*C*5 

[#62] g (xi, x 2 ) -h(xi* x 2 ) , 
45M»*ffl^T (t/:L, h(i/Ns/^3.Bfl«, xi* 

[»*JS1 2] i*3R*i 3, 4, 5, 6, 7, 8, 9 * 

li 1 1 ^*5l^T , 

Pff#-ft«*k€r7 Sft#B toW"C*ii(c 

^ 3CP4:7 :f -^Pl : ^ft:^k^T9f^^LfcBt-^XE(k ; 
p) ^ — ^Pt#<tfltk 4r-^^^«KA.B^WWiW<ft 
SfPk *K Al B&£f&#Bfc:aHf U Sft*B«:, 
^»Kb.a£ k * KA,B^Miftf&3SfP£:&& C^icj: 
tJ, ^—^W^Mfcfck U * fetc^ — ^Pf^Hfc 

• ktffl^TEfk ; P) 3&> ;* — P *«#-ft-r 

ft#0«*«|g#*IEtSlK#B{cttJ*L, IEtSJK(*Brt 
[0 0 0 1 ] 

L T 3t «f *: iS a ft -T 6 « -7- ^ - J ^ si fa f ^ 7 1 ^ ^5 ^ 
[0 0 0 2] 

[#£#SCO&^] Internet {C*5it 6 — /UCO-fe^a. V 

50 «rSS-ft:-r<5w ^^r gfft£ IT, TLinn, J. , et 
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aL , "Privacy Enhancement for Internet Electronic 
Mail: Part I, II, III, IV" , RFC-142 1-1424, 1993 J 
ffitWPEM (Privacy Enhanced Mail) rt*«3B£;ft<T 

[0 0 0 3 ] PEMfll «i*aiC4*8B«* #R S A 
(#^3tftfc rR. L. Rivest, A. Shamir* L. Adleman, "A Meth 
od for Obtaining Digital Signatures and Public Key 
Cryptosystems" , Communications of the ACM, Vol. 21, 1 
978j) &*IJ#U 7"— ^OBt*fb^*llBt-g-a2»T*>5 
MM-^DES (##3tfifc TQata Encrypt ionStandar 
d,FIPS-PUB-46, 1977J ) «rJfl^T^5 0 
[0 0 0 4 ] i£fS#AiaSff*BK*5' h!7-^^^L 

[0 0 0 5 ] Step 1. Al^^-^Pf ^Hfc»K*9 ^¥ 

^t:t5o "Tfcib*^ /u^P^Pf-^IfcCi^ 
[0 0 0 6 ] 

[«63] Ci=E (K ; P ) , 

[0 0 0 7 ] Step 2. AnB<nteffim (ee, n B ) *: 
[0 0 0 8 ] 

[3&64] C2 = exp(K : es) (mod ne) , 
ti-& 0 fcKU exp(a : x) 13 a £r x * LfcMSr^*? 

-r. 

[0 0 0 9 ] Step 3. Att*— ^*:£P&^M'lft«-e 

£;M^n A £^T £ (P) t:RSAl^^f^5o "Tfc 
t>%* f(P) tC«"rS**3Csgn A (P) 
[0010] 

[»65j sgn A (P) =exp(f (P) ; d A ) (mod n A ) , 

[0011] Step 4. AttCi, C2. sgn A (P) £ B 

[0 0 12] Step 5. Bli aa-OffiffittdBSTflH^ 
C 2 ^b, 
[0013] 

[ft66] K=exp(C2 : ds> (mod nfi) . 

[0014] Step 6 . BiittK&fll^T, 
[0015] 

1*67] P=D(K ; Ci) , 

[0 0 16] Step 7. Bl**— /U*3tPtf*Aa»fei£p3 

nr^t: f £ 

m (ba, n A ) Srffl^T, 
[0017] 

[*68] f (P) =exp(sgn A (P) : e A ) (mod n A ) , 
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[0 0 18] PEM{Cf*»COMiK/S3& 5 %ibiX§* 
[0 0 19] (1) ffi£tt:0£:j§J&»ib, ^-^Itf-S-fM* 
(iiSSStCKE-TSw £ #3* L\<\ PEM£OS^, 

R S APff*^Pf#<t^)t^<otf»fi:^fcfc«SW*: 

[0 0.2 0 ] (2) R S APff ■9-«rffl^)t»I£iSt l (i, ft 

t<Vtc#>, PEMTii, RSA^M^tT-f 
^ * tW-MS^t rBIEfilllB *r H« b r ^ 5 0 

[0021] ( 3) p EMMSs^-tte, ^ y h y — $<o 

*Jffl#Ai:*Jffi#B(D»35«— SUrt^-Sr ^Jc, A 
^B^ffi@35^^ft<i, AttBlCft!?-*-* Lit 

[0 0 2 2 ] 

«9 -T* Lie** LT^ttfiOiK^S^* -/H* *3r1£%&$: 
[ 0 0 2 3 ] 

-Meteor, ■ KSc^**^^— 

[0 0 2 4 ] A^WUm^Sfeco i ot LTi3, i£«#A 
* — ji? w * -f t: * 8fe T- o t , 

[0 0 2 5] Mf Aii, 0<xa<P-145I»xa 
[ 0 0 2 6 ] 

50 [^69] y A =exp(a : x A ) (mod p) , 
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£tmU £ffiT#Btt, 0<x B <p-l4Sfi»x B S: 
[ 0 0 2 7 ] 

[*70] yfi = exp(a : x b) (mod p) , 

5 • fcft, exp (a : x) a S: x * Lfcflt* 

[0 0 2 8 ] i?^— Wfifttea 
&«#A*3j:tfS{f#BJ2, S»oiD'ttaS:lr^l: 
S»U ir >^(3i£{f #ACD I D*« I A^b, ia6«# 
A(C@^cO^ (s A , VA ) £IE*:e£:^T\ 

[ 0 0 2 9 ] 

[3&7l] s A = exp( I A : e ) (mod 1. c.d(pi~ 1, P2 
-1) ) , 

VA=exp(a : s a) (mod n) , 

#BtC@^*CO^ ( s B , v B ) 
[0 0 3 0 ] 

[3&72] s B = exp( I b : e) (mod 1. c. d(p i — 1 , P2 

-1) ) , 

v g — exp ( a : sb) (mod n) , 

(CTtUlU &i£{f;# A:fc«fc tF§ff #B tC^£lcB£ 

m-TZo fc*:U 1. c. d (x, y) te^Sfrx, 

[oo3i] i Dffiffl^»*nii*rjcS"fss 

[ 0 0 3 2 ] i£{f#AI* (y a, v A ) £i£ft#A<7><& 

sw^irasu gft^Bi3 ( yB , v B ) £§{f*B 

[ 0 0 3 3 ] ^^^j»*=e-*Qi3l 

ffi^T, S^k>«««T-*>5 (x A , s A ) £SfE#Bco 
4*IJg»-<?*5 (y B , v B ) ^-X^K A ,B^ 
[0 0 3 4 ] 

[*73] K A , B= g (exp(y b : x a) (mod p), exp(v B : 
s a) (mod n ) ) , 

s B ) tmm%K<D<&mmx-thz> (y A , v A ) 
-^^#k B) a£. 

[0 0 3 5 ] 

[#:74] Kb, a= g (exp(y A : x b) (mod p) , exp 
(v a : sb) (mod n)) , 

[ 0 0 3 6 ] Z<Dt£* K Ai B = Kb ( A^jS&l^o 

[oo37]ft(;, mm^Anm^^-^^mm-r^m 
««« (x A , s A ) tm^mme^h, 

[ 0 0 3 8 ] 

[»75] K (A) =6 ( x a> s a) , 
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[0 0 3 9 ] 

1*761 C(A) = E a (K (A) ; S A ) , 

$nr^6v^#«t«:ffi5 0 T^f U E A (k ; M) I* A 

[0 0 4 0 ] * -/u*3t(7>Ptm#fbMSi 

fBiwH ic«=frr 5 r A- T J X^ 
SrJB^T, ^ P *f -i? k 

L^Pf^UtE (k ; P) t, f — ^Pff-iHISftkSr^;*^ 

»K A(B tcrnr#^UytBf#3:E (K A ,B : k) i^-A- 
gff*Bidi£{?-f 5, 

[0 0 4 1 ] aff*Btt, ^^^^K Bi a^^^E(K 
a.b; k) j5*bf-^flP*ft:«k«:*^-ft:U. * fc fcf 
— ^Pf ^-ffc^k i/8^T E (k ; P) frh* — yMcXF 

[ 0 0 4 2 ] 

-g-*ffl^r>— ^*3topt ^itte xxfy* -2ritm<n 
[0043] &tz. i wmmmnm^r (m.^-^—^^m 

^ [0044] 

[0 0 4 5 ] 11113* ^W^JJlftCT^^^f j^«j=a;«: 

100 1 ^ ^ w ^ e 200 <h «^ $ r t ^ 5 • * "J m # wo 
Kfiiooi*sv^^a«iiijSl30o4:^ ir^^rt^e 

[0 0 4 6 ] 0 2 13, ^:^0J{c^(j--5m^-^ -yuPf-^-'fh; 

[0047] h 3 13, mmm it*b9 tc*5<j- 6fu>^#^j 

50. K«100(7>rtffl«JiK«:^-ro *J«#«JK«100f3, SL*« 



(10) 



|3p8-251 156 



17 



18 



a -settle 105, /Ns/^zttt-w*io6, ;**-yio7, a ft 

[0 0 4 8 ] 0 4 12, ir>*«J»B200Ortffi«jS&*« 
-To -fr>'*tt!l3£B200W:, *»«£»20i, JH 
202, ffi«»tfsjSl3S«203, 8IJ|«2044:«x.T^5 e 

[0049] H 5 (i, # — hM00tf>F*l«i«J*4:^"t\ * 
-H400tt, SL**£*40U -<**»*402, Sli&ja;#4 
03, «»#404, Pf«-JHfcH£e405, /Ny^3.«-^t#40 

6, ^^-y407, ta*Kfi408S:«iri^o ^ 

[0 0 5 0 ] i6^, SSSSCTl OtC*3^5*Jffl#ttfl3S« 

500Ort3B«j£; *Jffl#«03S«5OO(i, KKSi 
SEB501, iifS»«502*il*r^S, 

titz S#o#Jffl#ffllSS«iOO K400t*Jffl*«IK« 
500) «:ffll^rffilO*lJffi#«!lKei00 K400<k*Jffl 

/Hi ft Srlffc 9 £r^;t 6* 

[0052] :lcd£#. a^^— /K7>pff-§-fb:*-*fe^oi^ 

' xxjSZ s.t 0<xij<p-l 

^mm : 

[ 0 0 5 8 ] 

* y ^ j = exp(a : x x j) (mod p) 
fc/iL, pi29ff», a 13 0< a < pT*Z/(p) <Z>Wtt« 

[0 0 5 9 ] £<bfc, ^i/h7"^{CgI^Kfc^f 

KLfcBff*#-ft;S8«i04d5*> 0 , r co^c^^Bf ^tvl- 

a-g-fbbfc^asr-tn^tiECK ; m) , d(k ; m) x* 

[0 0 6 0 ] ^^^^ico*^ 

[0 0 6 1 ] AldACO^^ttlJSBlOOArt^^*^**! 
102A& J; U«j*^if L04A*ffl t^"C S #0«4E» x A j i B CO 
^BBStyBj (i=l, n) *^v^^iK Al B^« 

[0 0 6 2 ] ^ 
[3&79] K A , B = n {exp(y B j : x A j) (mod p) I j = 
1, n} , 

[0 0 6 3 ] Rl«fcLLT, Bf*B(?5*Jffl*«IK«100Brt 

^x B j£ A0O^M#y A j (i=l, n) ^fe^** 
S*K Bl a*, 
[0 0 6 4 ] 

l4Bfe80] Kb, A=n{exp(y A j : Xfij) (mod p) I j = 5<? 



[0 0 5 3 ] ZW:SE«!RS:ai3b, Z/(n) fiSEftn*: 
2fefc"*-««lsWlt«:**3f. ni«**oi:S, Z/ 

(n) ttMsfcttlcftfc. xeZC^ir, xtt»Bt5 

fc, exp(a : x) 1$ a S: x * LjfcffiSrSfc>i" 0 

[0054] * ^ h i7-^<7>*jffi#6o i omnn-r^-x 

t \fy h£JLT"C & a^Sn-5»-&, *Jffl#0> I DflMRttZ 
/(exp(2 : t) -1) IO 
SWt^IDiHa^AS:, A = Z/(exp(2 : 
t ) - 1 ) <h^it5c 
[0 0 5 5 ] (HJKM1) 

Ml00^(7>§L^^10l*5i:U ! ^^^^i02^^^r 

[0 0 5 6 ] : 
[0 0 5 7 ] 
HS771 

for j — 1 , n . 

[*78l 

for j — 1 , n . 

1, n} , 

[0 0 6 5] 

imi) Ka,B=K B ,A, 

[0 0 6 6] £ ^tc, Attflrf-* — ^tiSW-rSW^^ 

^i^S A , Sfctt, A£>8HB'l*«x A j 

n) ^ib*Uffl#(B««100ArtO»Sfi»:*103A{Cj: 9 
«K(A) £fFJ#U Pff«#ftSS«105AS: J ffl^r»K 
(A) S A &fflHHfcLfc 
[0 0 6 7] 

1*82] C (A) =E (K (A) ; S A ) . 

^^e y i07A(cfBfjt-r5 e &*<7>«-7-p<— /ujHt{c*5 

5ri4<, ^ y i07A^|H«$nTt^5^^^«S:«: 

[0 0 6 8] * — yu*3C»WP-S-ft: 
AI3, *IJfl#ttfl3a«i00ArtOSL«**#101A«rfflt^TSL 

t^k^Mt-So /u*3CPS:Pta#^K«105A 
[0 0 6 9 ] 

1*83] Ci=E (k ; P) , 
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[0 0 7 0 ] 

[*84] C 2 =E (K A .B ; k) , 

[0 0 7 1 ] Att, iift 3Sfil08ASrJBl^TCi£ C 2 ^B 

[0072] * -^fcJC&m-^ik 

100Brt<Z>Pf«*ffc8ei05B&JH^X\ £i\ ^^#K 

b,a£ 

[ 0 0 7 3 ] 

[»85] k =D (K B] a ; c 2 ) , 
[0 0 7 4 ] 

[«86l P =D(k ; Ci). , 

[ 0 0 7 5 ] «Mfi0ij2) ^Ifj2t1t -irV^O#« 
[0 0 7 6 ] 2H« - 

ja*202*3 j: im3?t§204 * m ^x & * m&-t s * 

[ 0 0 7 7 ] ^9B«« : 

• pi ; ^3&> 

• P2=2qiq2+1 i 

- aiSZ s. t 0<ai<pi, ai^Z/(pi) X 

• a2^Z s. t 0<a 2 <P2> ailiZ/(pi) T* 

' q 1, q 2 e 2 ; 

[0 0 7 8 ] ; 
[0 0 7 9 ] 

[»87] * x^ez s.t 0<xx<pi-l. 
[0 0 8 0 ] 

[3S88] • y x =exp( a i : x x ) (mod p i) . 

<fr : Z/(pi) X Z/(p 2 ) -> 

ttSPSi^fc&Sfci- (n = pi P2 ) o xtt-t 
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So 

[0081] ±>?m%iW:2ooft<Di&mmrf 
j*««203&ja^T, 

[0 0 8 2] 

[$5:89] e d s 1 (mod 1. c. d(q x — 1 , q 2 - 1 ) ) , 
t£%> e, d ez*rf|sjS:U *\\m^X<o I D'ISW I ^ 
LT, 

[0 0 8 3] 

[$C90] s x =exp( I i : e ) (mod p 2 — 1 ) , 

[0 0 8 4] CC7}£:£, 

[0 0 8 5 ] 

[»91] 

s ^ s M if I^I /] eA = Z/(p 2 -l) , 

[0086] -v**»co*# 

[0 0 8 7] 

^ [$fc92] v i=exp(a2 : s^) (mod p 2 ) . 

£ fetw, ^ h !7-^ tC*3Bfc*iX7t#IJ«#tti»«LOOrt 

Rt-tft^ECK ; M) , D (K ; M) -CSfet\ 
[0 0 8 8] *y h!7-^0*IJJB%A, BtCO^T, A 

A, BI2&(D^JiI£||fTi-& 

A ft A ffl #^1IJ^S 100AF*) CD * L02A £ 

(x A , s A ) £BCD>&M^ (y B , v B ) a>feT;**»K 

A.B&* 
[0 0 8 9 ] 

1^:93] Ka, b= g (<f> (exp(y b = xa) (mod pi), exp 
( v b : s a) (mod p 2 ) ) ) , 

(CTMt6 fl BttBO*IJffl#«fl»«100Brt(7> 
J»J(* 102B <t 104B W-W til06B^rffl 

^T, B(D^^# (x B) s B ) ^AO^Ii^ (y A , 
v A ) frh-** ^SIKb, a^:^ 
[0 0 9 0 ] 

[^t94] K Bl a = E (<f> (exp(y a : x b) (mod p i) , exp 
( v a • s b) (mod p 2 ))) , 

[0 0 9 1 ] 
[»95j 

Z/(n) ( (x, x) x) , 

[ 0 0 9 2 ] r<7>£^, P^ib3&»(-, K Al B = K Bl A, 

its. 

5(7 [0 0 9 3] ^c, A^m^^ — ^SriSfai-Said^ 
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*^#JJS#Koi^Ttt, ^tihcomm^r b A t <Dffl<D& 

#ftiJ5K«100ArtW«*ja:*103A^J: ?>«K(A) £rf^ 
L, B*«-g-it:»ttl05A*:ffll^T8iK(A) K J; «? S a & I* 
^■t;L3tC(A) = E(K(A) ; S A ) , S: , ^ ^ U 107A 

^ y io7Atc gats s tix i ^5 * & m*®i o 0 

[0 0 9 4 1 — /U#:S:<OW 

Att, *lJffl#ffllSS«100ArtOSL»«i*101ASrffl^rSL 
»rSr®t^ r £ LT&£j&^103Aa> b ir Pf 

Srffl^r^-^Pf k J: 0 «p #-fb Lfcuff #3CCi 
*, Ci = E(k ; P) , iZTftm-tZ* £?>M, Pt»* 

T-Pf ^t:Lfc0f#3tC2^, c 2 =e(k Ai b; k) , |:t 

[0 0 9 5 ] AI2, iifs 3Sfil08A*:JH^TCi£ C 2 £rB 
[0 0 9 6 ] ^ — ^*3tC0«#^ 

100Brt<7>WH*ft8Bl05BSrffl^T, ^**»K 
B, A<£ ^ > k=D(K B ,A;C 2 ) , ^r-x — ^Pf -§-fM*k 
Sr«-§-ft;U Rl:f-^«*ft»kS:ffi^T. P=D 
(k ; Ci) , tCT, ^*3CP*«-S"fbi-5o 
[0 0 9 7 ] 3 ) SafcfcJ 3 I*, 36Jfe0lJ 2 K*5^ 

[0 0 9 8 ] Z»fll 

■fe>'^(i-fe>'^ttl3SB200rt<7>*a:*fe«20i, JB*6«* 

[0099] 'Ammm : 

• p l ; 3S$r, 

• P2= 2 qiq2 + 1 ; 5SS$fe, 

• aiEZ s. t 0<ai<pi, ailiZ/(pi) T" 
■ a 2 eZ s.t 0<a 2 <p 2 , ai!4Z/(pi) 

' qi, q 2 ^ Z ; ^Sfc. 

«4#101^J: V^#*»«8l02*ffi^T«k(O»S:^ja-r 

o 

[0100] : 
[0101] 
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1*96] • x^ez s.t 0<x^<pi-l. 

&mm : 

[0102] 

I8fc97] • y x =exp(a i : x % > (mod p i> . 

[0103] ^ v^ttir^^«DJSB200rtos®flif^j5a; 
Kfi203*ffl^T, ^ij^ifx co I d«« I * l:»Lt, 
/0 (1) U + U (mod P2-1) 

( 2 ) I x + i X (mod p 2 — 1) =£Iu + i u (mod 
P2- 1 > if A, * ju , 

[0104] 
[«fe98] 

s x =exp( U + i l) : 1/2) (mod p 2 — 1 ) 

[0105] Wfe^fcl, s a. ^ s M if X 

^ [0106] t;*^**^*^ 

>y h !7 — ^<7)*J/B#A,tt, ^ h/u (y x . v *- 
;i(^9B»£ LT»»«rfrfc5o rtiftiU v^=ex P (a 
2 : s x) (mod p 2 ) • * feK. H !7-^fC®^^ 

y x^*rt*Lfciif«# j fi:KBio5^ft> 9 , 

ftSfe^t^tt^kLfcttSfc^iX^ixE (K ; M> , D 
(K ; M) 

[0 10 7] *yh7»^0*|fflf A, BMo^T, A 

a, b hmo^jig £r?m-r& 

A 13 A OflJ m # W SS B 100A CD # 1 02A t ?H®3§ 

104A£^^~tfW«106AS:Jfi^-t\ AGD*&«8i 

(x A , s A ) tB<n&MM (yb. v B ) ^b^^^»K 
a.b^t> 

[0108] 

[%99] K A) B = g (<*> (exp(y b : x A ) (mod pi) , exp 
( vb : s a) (mod p 2 ))) , 

(CtMtSo BttBO*J«#ttlSSBlOOBrtCO 
^ HI® # 102B <h 8»Jt* 104B t'^yi/** 106B^:^ 
t^r, BCO^^f# (x B , s B ) i:A(75^§§^ (y A , 

v A ) ^b-^^^WKB.A*. 
[0109] 

ISfelOO] K B , a= g (* (exp(y A : xb> (mod Pi) , ex 
p( v a : s B ) (mod p 2 )) ) , 

[0110] 

[«uoi] 
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<f> : Z/(pi) X Z/(p 2 > 
4SI^S^I6«:*t>-*- (n = pip 2 ) . xti^r 

"To 

[0 111] Wfes&WC -Ka.b^Kb.a. 

[0 112] £(btc, AI4«^*-/u£ia*«-#-S«3s# 

#«SS«i00Artco«*fefi»;*i03A^ J: Ofi*K(A) 

U Pftt#ffcRei05A*ja^T«K(A) KJ^Sa&WF 

^HliLfcC (A) =E(K(A) ; S A ) , * ^ y 107A 

y i07A^E«S^T^S^^^»«r«5o 
[0113] * ~/i-*:sc content: 
A n , #J/H #«IKe lOOArt o£L&:$§ ±SS101A£:£1 t^TSL 

^tik^Mt5 0 >~/u#xp*fflf«:*Ht;Rfiio5A 

^ffl^tf-^^Mkta «? W#ffcL)t«-f§-:S:Ci 
Sr, Ci = E(k ; P) , ICTflsjSt-rS. '^fetc, »«■§■ 
fb3S«io5AS:ffl — ^ Pff -^{fc^ k ^-^^ ^tK A) b 
*CBf^t;Lfcffip#'3CC2*, c 2 = e(k a ,b; k), t^r 

[0114] A (4, it ft JSHlOBASrffi^TCit C 2 £B 

[0115.] ^*:St£>tt#ffc 

lOOBrt0>W«*{fc»SlO5B&#^T, *i\ ^*^®K 
B.A^ 1 ?, k=D(K B ,A;C 2 ) , ktt*-* k 
*«-fHfc;U ^^-*Pt#te»k*ffl^T\ P=D 
(k ; Ci) , \CX. * — /^*3CP«:«#<t;-*-5o 

[0116] (^Mf'j 4 ) ^m^'j 4 mmm z , 3 k 
[0117] owi 

ir>^ttlr:^UOK«200rto*S*£S20K JB«f*R± 
/&l§202*5 J: tf* S#2204£i3 V ^X & <7>«« £ fEj*"** 6 0 
[0118] 4*ffltil« : 

• pi ; 

• P2 ; SIS, 

• aiez s. t 0<ai<pi, ^o, aiiiZ/(pi) X 

• a2^Z s. t 0<a2<P2, * ai!4Z/(pi) 
»«** : 

•Z/(P2-D OTt;«:tii* + 5«'«*Pff*r^^yX 
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Z/(n) ( (x, x) -> x) , 

-€:ttEo(k ; M) , D 0 (k ; M) r*^^"T 0 
[0119]^7 h!7-^(0**IJffi#^tt*Jffl#ttl5K« 

[0120] : 
70 [0121] 

[46102] * x^ez s. t 0<xji<pi— 1. 

<&mm : 

[0122] 

[8fel03] • y x =exp(a i : x % ) (mod p i) . 

% y V 9 — ? <D*\)m%l 14 (cg^to I D*« I a. 

SrSfttSc 

[0 12 3] ir^fS, ir V^ttiJgg200f^(5O®®^f^ 
J»£S«203&;fl^T, ^iJ^#A.<7> I Dflt ffi I xtc^b 
20 X s 

[0124] 

[Sfcl04] sx=E 0 (r;I^)ez/(p 2 -l), 

[0 12 5] C 

[0126] 

[«T105] 

s x * s „ if U9tI„GA = Z/(p 2 -l) , 

[oi27] -^x^ 

lCO^BB»i: Lra»«:?T<t5, fcAiU vx=exp(a 
2 : s x> (mod p 2 ) • * ^f" 7-?\Z.Wm.£ 

nfc*iJffl#«0»«lOOrt{cttl^ — OS«»»^»T;u=^ 

y X^&rtyRLfcWa^-ffcKSlOSa** 0 „ ^oo^^f# 

(K ; M) X*&t>-to 

[0 12 8] ^s/F7-^«>*JffitA, BlCOPT, A 

iiBic#Lr«^-^*«5fc^ 6 rog^coT-e, 
^ A, BI4^^^iiS^r^fr-r6 

A 14 A (Dfflm #«JSK« lOOAF^I CO << * ^ff |» L02A «3S* 
l04Ai:^^ v'3.fH(48l06A*:fflv ,k r, Aco^^f^ 

(x A , s A ) bBCDi&mm (yb, v B ) ^^-^^^^k 

[0129] 

[$fcl06] Ka,b= g (<i> (exp(y b : xa) (mod pi) , ex 
p( v b : s A ) (mod p 2) ) ) 

5<? ffl^T, BCOeffifi* (xb, sb) ^A^ili <y A . 
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v A ) ^b-7^^SK Bl A^, 
[0130] 

[^:107] Kb, a = g ( <f> (exp(y a : x b) Cniod pi) , ex 
p(v A ; s b) (mod P2>)) , 

<*> : 2/(pi) X Z/(p 2 ) ^ 

ft£>na¥«***rt- (n = pi P2 ) * xii-t 
-To 

[0 13 2] Wfc*^-, K Al B = K B ,A, 3&*j£ 

£-f 

[0 13 3] Sfctc, A(**^-^-^*i3Sfti-S«ld^ 

^**»o&<frSA, £fcte, ACOffiffiWftxA^b^iJffi 
#«JK«i00Art<^«*±jS;«iO3A{cj: t)StK(A) «rf^jS; 
U Bt*#{t3S«l05AS:ffl^rStK(A) 19 S A *:Bff 

■g-ffcLfcC (A) =E(K(A) ; S A ) , ^ L> 107A 

^ ]} 107AKlB«£jfcT^5^;**»&«5o 

[0134] ^ — ;u^^C(D0f 
Ate, *IJ^#ftySK«100Art<OSLft*^*101A«: J ffl^TSL 
HSrSrStf, r £A#<b LT«*J=K*103A^ fe'r'— 
^Mk^Mt^o ^-^*3tP«:rtr«*<fc;JS«l05A 

Ci = E(k ; P) , iCT^-rSo 2 *b tc. ff#m^ 
ffcKttlosASrffl^T^— ^P§#flS*k ^^K a ,b 
T-Bf-g-ffc;U)tPff-§-3tC2Sr. C 2 =E (K A(B ; k), (cr 

[0135] Ate, jiff £SSl08A&jfl^-CCi£ C 2 £rB 

[0136] * — /u*3Cco«-S-ft: 

iooBrtoBff«*{bSseio5BSr^t^r, *i\ -^^^^k 

B,A«t^ k=D(K BiA ;C 2 ) , tcr^-^Pf HHfc»k 
^f^b, SfcKx — *Pff*te3^*tf^T, P=D 

(k ; ci) , ct, ^-/^xp^m^t-r^o 
[0137] mmm 5 ) nmm 5 laieififfi 2 <t>#:^)& 

[0138] fpffi 

ir^teir >-^(ay^200^OS^£2§201, 2««r«* 

[0139] 4*BH*« : 

• p ; SIS, 

• n = q * q ' , 

• aeZ s.t 0<a<p, ateZ/(p) "CiHW 
«, 
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[0131] 

[«ri08] 

Z/(n) ( (x, x) -» x) , 

•q, q ' e Z ; s. t q-l = 2£i£ 2 , q'-l 

= 2rjiTj 2 (|i, ^ 2» tj 1, n 2 ; S3S) , 

■ aGZ s.t ateZ/(q) , Z/(q') t»/H*&«. 

[0140] m&m : 

[0141] 

[3S109] * x^ez s. t 0<x*<p — 1. 
[0142] 

[SfellO] * y x =exp(a ; x x ) (mod p) . 

[0 14 3] ^^^(i-ir^^ttflSS^OOrtoSffiSlffja; 

KB203*ffl^T\ ed = l (mod M) , /^e, d £r 
^fiScl> I DAMS I X i^Lt, s x =exp 

( I x : e) (mod N) , 
[0144] 

[ ISl 1 1 ] v x — exp (a : s x ) (mod n ) , 

6 Q t/*'L, M=l.c.d(ai-1, «2-l, 
IJ2-D > N = l.c.d(q-1, q'-l) e 

[0145] ^(O^^, 

[0146] 

[3S112] s x ^ s ^ and v x ^ v ^ if I 1 ^ I w 
SA = Z/(N) , 

[0147] -**?m<D&^ 

[0 14 8] $ feK, *y f* !7-^^««$nfc*Jffl# 

tt#{tLfcjB**-tiX-?:tlE (K ; M) , D (K ; M) 
[0 14 9] h7-^^Uf*A, BiCot^T, A 

A, Bte*O^JiI$r^lff-r6 

AttA(75*J«#«»SlOOArtCO^#*Jfill02Ai:*** 
104A^^y^a.tt-3S«106A*fflV^r, AO^i©^ 
(x A , s A ) ^B<7>^M^ (y B , v B ) 35»fe-^X^»K 
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[0150] 

[$ni3] Ka, b~ 8 (<£> (exp ( y b : x a) (mod p) , exp 
( v b ; s a) (mod n ) ) ) , 

KTf&*-*-5, BI^Bco^lJ^#lIiJ^gl00B^cO 
-< * 102B £ ?S3? S§i04B i ^ y V ^ tf 106B£ 

^T, S (x B , s B ) fcA<Z>^Bitt (y A , 

v A ) ^fe-^^^ttKs.A*:. 

* ; Z/(p ) X Z/(n) Z 

*5i^s*«i**t)i- (m= P n) . ::r*, xis-en 

-To 

[0 15 3] rco^#, Mb^k:, K a .b = K b ,a, 2*J* 
[0 15 4] £<bK, Att«-7-^-^Srffifti-5«^3a« 

#«j^SiooArtco«4fiS;*io3A^ ct Y) (a) 

U Bf«#ftR«105A*:ffl^TS*K<A) KJ:S>S A *» 
■§-fbL7tC (A) = E(K(A) ; S A ) , * ^ V 107A 

^ y l07AKlfEtt^jftT ^5^* 

[0155] ^ -/MsXCOPf -JHfc 
AJi, ^^ftJKaiOOArtwSLjft^SSlOlASr^^rSL 
»r*lV, r £A*£ LTS£j&#il03A^^-^ 
■fHbftk $:Mt6 0 ^*3tPS:Pt«-§-ft:SSBl05A 
£/B^T^~*l**fli»kfc«fc 9 l**ft:LfcPt*3CCi 

Ci = E(k ; P) , {CTfF^-TSo SfcK, Pf«# 
ftKBlOSAt^T^— ^Bf^HfcWk fc-^-X ***K a ,b 
T-Pf ^L/tPf#-3CC 2 ^, C 2 =E(K a ,b; k),MT 
flff«#{fcftBi05A&ffl^T^-*W 

2=E(K Ai b; k) , (CTMtl), 
[0 15 6] All 51 ft SSfil08ASrffli^r Cii: C 2 £:B 

[0157] ^ 

100Brt<Z>l*«#{fcKBl05B&JB^T, ^;**«K 
BtA £^ k =D (K B , a ; c 2 ) , ^tr-^ Pf -§-<b^k 
«:«-JHt;U *^-^#ft»kSrffl^T* P==D 
(k ; Ci) , KT, p« — /u*3CPSr«^t-**5o 

[oi5s] mmm e ) nns^j e nmmm 3 

[0159] Qffll 
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[0151] 

[£6:114] Kb, a= g (<£ (exp(y a : *b) (mod p) , exp 
( v A ; s b) (mod n ) ) ) , 

[0152] 
[*115] 

'(m) ( (x, x) — x) , 

w [0160] ^mmn ; 

• p ; ^$C, 

• n = q * q ' , 

• a <E Z s.t 0<a<p, £>0, a!3Z/(p) 

• q , q'GZ; s. t q-l=2£i£ 2 , q ' - 1 
= 2t 31 t)2(^1» S 2. 11. ?3 2 I ^t) > 

•a^Z s.t a!3Z/(q) , Z/(q') "CJHttS. 

• f ; «fla7^^ABfl*. 

[0161] : 
[0162] 

[*116] -x^ez s. t 0<xi<p-l. 
Afflm : 
[0163] 

[SC117] • y i =exp( a : x x ) (mod p ) . 

30 *y b ? — ?<n*\\M% lte-t><?^£ft<n I Di»3£ I a. 
[0 16 4] -tr^^mir >-^MIS^g200P k ](^^^^^^ 
(1) I i +- i x (mod N) 

( 2 ) I x -h i a (mod N) (mod N) 

if X # ju > 
to S J: 5 i-lES^: i x SraSt^, 
[0165] 

[»U8] s x =exp( U+ii : 1/2) (mod N) , 
40 v ^ — exp (a ; s x ) (mod n ) , 

^rff^LT, (si, v x) ^m^X\z.^^\zM^ 

[0166] C(7>i:^, s^^s m , vx^= 

v tf if X ^ u y ^JStit"t*5 0 
[0167] -^^^^(O^^- 

[0 16 8] ^btc, *y h !7-^tc^^^ixfc^iJffl# 
«ISS«l00rtlcttl3 — i^««»Ptf-8-»r/u^ y XASrrt 
5^7 »!L^:Bff«-S-{liJSHl05^*> 9 , C<7)$^#ff£-^X/u 
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=t y X A ft m ^ T ¥■ X M ft- « K T*m f L & % *5 J: x* 
«*ft:UfcJISaSr**X j enE(K ; M) , D(K;M) T 

[0 16 9|^yH7-^*]«fA, BtCO^T, A 
l*BfcL#LT«^*— ^ftj£!9fct\, Z.<Dg&)<DT-C^ 
A, B^^cD^Jllft^tf-rS 

A(iAO*J«#W»filOOArtCO^#*»*102Ai:**» 
104A£^ y ^*.tHS4£l06ASrfil^T, 
(x A , s A ) tB<D&mm (y B , v B ) *»fe^^^«tK 

[0170] 

[^1 19] Ka, b= g ( <f> (exp(y b : x A > (mod p) , exp 

<fr : Z/(p) X Z/(n) — Z/(m) 
fe5PS*«ft*fef (m=pn) o ::T\ x li^rix 

"To 

[017 3] ccd££, Ka,b = k b ,a, 

[0174] se>M, Att«^*-/u£i£fs-r5«£a* 

-^^^^COH-^Sa, AO«B*«XA**b*UM 
#tty»«100Art(O»*J*«103AtCj: 0»K<A) ft^J& 
U lf*#{t:SKl05A*^^r«K(A) {C.tOSA^Pt 
^LfcC(A) =E(K(A) ; S A ) , Sr.- ^^e i; 107 A 

KKtrt-s. j^^com^y ~;w§ff leaser . 
y io7A^lBtssnr^s^^^»ft«5o 

[0 17 5] ^—/l^IfcWW-fHk: 
AIS, *Jffl#«ISgfil00Art(^f&L»»**lOlAS:ffi^rfL 

tsrrftagu*, r &Atik ^Tmtk&mozAfrb-r-fm 
^ftftkft^-rs. /u^pftrtftt-tftjsttiosA 

ftffi^r^-^Bt^Sik^J: 9 Bff*{tLA:W*S:Ci 
ft, Ci = E (k ; P) , KXft&-t-& 0 £<bfrc, iftt 
#{fc:S&« lOSAft^B ^— * Bff*{M* k 3:^ x * mK 
A,BX^^-itLtim-^-XC2^^ C 2 =E (K AtB ; k), 

r^^-r^o £<b(c, Ptn^bSsaiosASrfflv^r^— ^ 
c 2 =e(k Ai b; k) , fcrffr-fc-rSo 40 

[0176] AJ2, iift SBlOSASrffll^-CCi^ C 2 ftB 

[0177] y -/u*3t<o«:fHfc: 

i00BrtOBff*#fl:KBi05B4:ffl^T, *-f, -^^^^K 
b,a£9, k=D(K B ,A;C 2 ) , tcrr-*i#-sHfc:*k 

(k ; ci) , i:t, ^ -/i^xp ftm-*Hb-r6c 

[0178] ( jgJfiOT 7 ) JMSM 7 (i|g3Sfif!l 4 <z>#:S£j£ 
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( v fj : s a) (mod n ) ) ) , 

idT^ja-rs. BrtBo*jffi#«iss«iooBrto 

^ £ JH®^ 102B £ 104B t^y-y^ 106Bft£l 

<^r, &&<Dmmm (x B , s B ) (y A) 

v A ) A^-^^^SSKb.a^* 
[0171] 

[3&120] K Bl a = g (exp(y A : x B ) (mod p) , exp 
( v a : s b) (^d n ) ) ) , 

[0172] 
1*121] 

( ( X , x ) — > X ) , 

[0179] 9HR 

^v*i**:^{BflK«2oort0>*tt#£#2ou mteWitk 
^»202^xx^mnm(A : km^x».<om»i:^fA'r^o 

[0 18 0] 'Atttitn : 

• p ; 3$WC, 

• n = q • q * (q, q ' ; ^3&) , 

• aez s.t 0<a<p, £>0, a 14 Z/< p ) TIB** 
*, 

• z/(n) <7>7c*ffi*-r*««»at^r/u^y x^*5«t 

• aez s.t a!3Z/(q) , Z/(q*) T?fttt8. 
^ C1T\ N=l.c.d(q-1, q'-l) ^t5o 

ir > ? <d m m ' \ » « Tfc ^ «* » rtp # r ^ ^ y x a t c j: 

ftlEo(k ; M) , D 0 (k ; M) T*^^fo 
[0181] *y h!7-^(?>«-*Jffl#Xtt*Jffl*ffllK« 

[0182] : 
[0183] 

[ftl22] * x^ez s. t 0<x^<p-l. 
[0184] 

[^123] • y x =exp(a : x x ) (mod p ) . 
«:»»-♦- So 

[0185] izy?n*z/*w&W:2QQft<Dm&mYEf& 

[0186] 

[*124] s^-E 0 (r ; U) SZ/(N) , 
v^=exp(a ; s^) (mod N) , 

[0187] CCOi:^, sx^s w and v ^ v tf i 



(17) 
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f e A - Z/(N) , ^jSSti-SC irlC&S"*- 

So 

[01881 ^*i?§ft<7>#3er 

*y ^ h;Myh v x ) £r 

[0 18 9] h!7-^tc»«EStifc*iJffl# 

a*fbLfc»***tU j enE(K ; M) , D(K;M) X 10 

*tt>-r 9 

[0 1 9 0 ] *y h 9 — ^£>*Jffl#A, BlCO^r, A 

a, Btt&^w&sifrrs 

AttA<?>*IJffl#«IJSeiOOArt(7>'<#*#«102Ai:»»# 
104A£^ s> ^3.W-3S4*106AS:ffll^T , AOS 85* 

<f> ; Z/(p) X Z/(n) -> Z/(m) 
fc5H3S^«**;bi- (m=pn) . " T% xlS^n 

-To ^ 
[0 194] ^CO^r^, mhfrlZ, Ka.B^Kb.A, 3&*J# 

[0195] £fbfc, Ai*m^;*-^£asft-*-£«#a* 

^^^»<?3*^Sa, *fcf4, A<^^ J ff^x A £>ib*lJJ3 
#fflK«100Art(D»^J5S;#103A{Ci &«K(A) «rf^JS£ 
U Bttt*fb:K«105A*ffl^T»K(A) tcj:DS A ^st 
#{tLfcC(A) — E (K (A) ; S A > . * ^ y 107 A 

^ y l07AtClB*S*tTt^S^^^»*:«5* 
[0196] ;* — /u*3CWP»*<fc 

Af*, *jffl#ffiyK«iooArtcoSL9Sr«fe«ioiA&ffi^rsL 

»rSrSV. r S:A*t L-r«*±jS:«103A3&»fe'7 ? — ^» 
^tk^MtS, ^-/u*3tP«rflff«#^»ei05A 
Srffl^T^-^flp-l-ftlStk tcj: «3 Lfctt -§-3CCi 

Sr, Ci = E (k ; P) , {ctMt6. Sfefc, Pff« 

A ,B^Bf^t:b^W-*3tC2*, c 2 =e (k a ,b ; k), k 

[0 19 7] Af2, ia«SSBl08AS:ffl^rCifcC2S:B 

[0198] * — /t^xcoa-g-ffc; 

B^btlT#jtCi^C 2 ^tT, B<7>*Jffl#«IK« 
100Brt<7>|ltS*ft:Kfil05B*ffi^T, £i\ ^^^^K 
Bi a^^> k=D(K Bt A;C 2 ) , tCT^— ^Wp-IHfcttk 
^m-^-fbL, ^Bff-§-ffc«k fc/fll^T , P=D 

(k ; Ci) , KT, ^-yu*3CPS:«-g-ft;-r5o ^ 



(x A , s A ) ^BCO^P^ (y B , v B ) frh-*x*&K 
a. b£* 
[0191] 

[8fcl25] K A) b= g (* (exp(y B : x A ) (mod p) , exp 
(vb : s A ) (mod n ) ) ) , 

lcrMt6 6 BI*B<Z>*Jffl#«ieei00BrtO 
^# SUg^ 102B £ ffi»3§ 104B t^ yi/~ 106B&J3 
^T, §#£>8«» (x B , s B ) tA<D<&M$£ (y A , 

v A ) ^^b^^^^K B , A ^r, 

[0192] 

[Sfcl26] K B , a = g (<f> (exp(y A ; x B ) (mod p) , exp 
( v a : s B ) (mod n ) ) ) , 

(-Ttm-fSo fcffu, g 14^-/ v^^tf»*rtr-^^^ 

nfiAj/^aJSStSJjU *i4, 
[0193] 
[*127] 

( ( X , x ) -> X ) , 

[0199] mmms) mmm\^hmmmi\^^ 

[0 2 0 0 ] * * — /L^^CCOUf 

AI4, *iJffl#«ISSfilOOArt^SL**^«lOlA«:ffl^rSL 
Hfer £38tf, r ^rA^J^ LT^£/&3§103A£> bi^— ^ flr 
#{t:®k ^r^^-r-Sc ^-^*3CP*Pftt^k:iS«i05A 
^^T^-^Pf^-ffc&kicJ; i? Pt#^bfcflff-9-3CCi 

Sr. ci = e (k ; p) , Krf&srt-s. at* 

1ft3S*P*. C2=k*K A) B. ^XYtf&'tZo 
[0 2 0 1 ] A(4aftSS«108ASrfflt^rCit C 2 *B{C 

[ 0 2 0 2 ] • ^*3t(7>tt-§-ft: 
Bl4i^t^r#fcCi^C 2 f-MbT, StJMSKMB 

k =c 2 *K A ,B. Ptm-S-flsKaiosBSrffl^r^- 

^Pf-^-<b^k^^, P=D(k;Ci) , tCT^— 

[0 2 0 3] (£Jfe01j9) 3l*ff!l2 36»bl8SSCT8<7>^^ 
^»**lC*3t^r, A(4AO*J^#«IS8fil00ArtO-<# 
**#102Afc «*#104Ai: ^ s/ ^3.tMt#106AS:^ ^ 
ACOm&m (x A , s A ) i:B(D^Mii (y B , v B ) 
3&>fc^^^ltK Al B** 

[0 2 0 4 ] 

[46128] Ka, B — g ( (exp(y B : x A ) (mod p) ) * (ex 
p( v B : s a) (mod n ) ) ) , 

^T, t (x B , s B ) <i:A(75^W^ (y A . 

v A ) ^b^^^fiKB.A^^ 
[0 2 0 5 ] 
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[&129] K B .A=g( (exp(y A : x B ) (mod p) ) * (ex 
p( v a : s b) ( raod n ) ) ) , 

jft5^^~B9»:4:*;bU x * y 12 x £ y <7>WftfiWlft 

[0 2 0 6 ] (^Jftfflll 0) h !7-^<^)4-*Jffl#tt 

# — U — /uiSff 9#fCI3# — K400& 

tsw i frh^mm 9 tc*s^-c\ fUM^-iio^gioo^^iL 

****101, ^<#»3Il#102, «£j**103* *®:^io 

ffl^rff* pM^n^M- K4oortcoSL«r***4 

01, -<£fl3?^402, »±j«*403, «3S^404, fffm^- 

eft#-^asm3tf*^- K4oortoa*»«4os* 

Tilff 0^3OO£^LTi*ff "T^o 
[ 0 2 0 7 ] 
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[Si] **W<o|ei6ffiJ^*5{t 6 v-^r 



[04] 9CD^*^*jarto*>*ttOR 
[Hi 5] IWiJ 1 0 (DiyXT^Mf&ft&X— Krtffl«fi8 

[0 6] ^i£#u ow^fA^rt^ifflisstrt 

100- --#JJ8#ttl8S, 

101- #J«#i»J««100rtWSL«[»**, 

102- *Jffl#«l^filOOrt(7>'<**Jt#, 

104---#IJffl#{|lJ^glO0^1^^®^, 

ios-*iJffl#fflilS6eioort^Bff«#ft:K«, 

106 ■ ■ ■ *IJ ffl m « 100 CD ✓ n s/ a , 

107- *J^*«JSK«ioortco^ y , 

108- *jffl#«iS6«ioortcoafSK«, 
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